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1 

EARLY DETECTION OF FALSE START-OF-PACKET 
TRIGGERS IN A WIRELESS NETWORK NODE 

BACKGROUND 

[0001] This invention is related to wireless networks, and in particular, to a method and 
apparatus for the early detection of false receiver start-of-packet (SOP) triggers at a station 
(STA) in a packet-based wireless network such as a wireless local area network (WLAN). 

[0002] Wireless networks are known and their use is becoming widespread. The IEEE 802.1 1 
standard for local area networks describes variants in the 2.4 and 5 GHz range. A node of a 
wireless network such as one conforming to one of the variants of the BEEE 802. 1 1 standard 
includes a radio transceiver/modem providing physical layer level (PHY) processing and a 
MAC processor. The receiver of the physical layer processor (the PHY processor) needs to 
accurately detect the SOP. Conventional receivers use a received signal strength indicator 
(RSSI) for so detecting the SOP. See for example, U.S. Patent application Serial Number 
10/095,668, mtd AUTOMATIC GAIN CONTROL AND LOW-POWER START-OF-PACKET 
DETECTION FOR A WIRELESS LAN RECEIVER to inventors Ryan, et al, filed: March 8, 
2002, Attorney/Agent Ref. No. CISCO-5227, that describes a low-power SOP detector based 
on RSSI. Patent Application 10/095,668 is incorporated herein by reference. In addition, the 
IEEE 802.1 la and 802.1 Ig (OFDM) standards include sending a SIGNAL field in the first 
section of the packet that describes the modulation type and coding rate for the payload of the 
packet. The SIGNAL field is not very well protected ~ only a single parity bit is provided. As 
a result, there are many false triggers where the parity bit falsely indicates a valid SIGNAL 
field. As a result, the wireless node of the network is unnecessarily blocked from receiving 
valid packets while it processes what is effectively useless information. Moreover, the 
wireless node will not perceive that this is a bad packet until it has completely finished 
processing the packet and detected that the payload fails its frame checksum (PCS) check, 
which is much more robust than the single parity bit protecting the SIGNAL field. 

[0003] Thus there is need in the art for fast and early detection of false SOP triggers. 
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SUMMARY 

[0004] Disclosed herein is an apparatus, a carrier medium storing instructions to implement a 
method, and a method in a node of a wireless network able to receive packets. The packets 
exactly or substantially conform to a wireless network standard according to which each 
packet includes a header having unused bits set to a known value and bits having only 
legal/expected combinations in the case that the packet exactly conforms to the standard. One 
embodiment of the method includes receiving a start-of-packet (SOP) trigger that indicates 
that a packet may have been received, checking one or more bits in the header to determine 
whether or not they have their respective preset values in the case of unused bits or 
legal/expected combinations, and continuing to process the packet in the case that the bits of 
the header pass the test, e.g., that the checked unused bits have their respective preset values 
and/or the combinations are not illegal or unexpected. We refer to header bits that have their 
preset values if they are unused bits or header bits that do not have an illegal or unexpected 
combination as header bits that have "correct" values. 

[0005] In one embodiment, the header includes a first field modulated at a known rate that 
has one or more unused bits, and a second field modulated at a data rate indicated in the first 
field. In such an embodiment, the checking includes processing the first field and checking 
one or more bits in the first field to determine whether or not they have their respective 
correct values, and, if the checked unused bits of the first field have their respective correct 
values, checking the second field for integrity. 

[0006] In one embodiment, the packet optionally includes an indication of whether or not 
unused bits of the second field include an error detecting code formed from at least part of the 
first field. In such an embodiment, checking the second field for integrity includes checking 
the indication to ascertain whether or not unused bits of the second field include an error 
detecting code. If it is ascertained that such an error detecting code is included, the checking 
includes checking the included error correcting code. If it is ascertained that an error 
detecting code is not included, the checking includes checking one or more unused bits in the 
second field to determine whether or not they have their respective preset values. 



CISCO'7472 



3 

[0007] In one embodiment, the method further includes providing a measure of the received 
signal quality; and checking whether the received signal quality measure is above a set level, 
such that the SOP trigger is ascertained to be a false trigger in the case that the received 
signal quality measure is not above the set level. In one implementation, the measure of the 
received signal quality is a measure of the error vector magnitude (EVM). 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0008] FIG. 1 shows a simplified functional block diagram of a wireless network node that 
includes an embodiment of present invention. 

[0009] FIG. 2A shows a Physical Layer Control Protocol (PCLP) header that conforms to the 
OFDM variants of the IEEE 802. 11 standard. 

[0010] FIG. 2B shows the individual bits of the 5-byte PCLP header that conforms to the 
OFDM variants of the IEEE 802. 1 1 standard. 

[001 1] FIG. 3 shows an embodiment of the modem of the wireless network node of FIG. 1 in 
more detail. 

[0012] FIG. 4 shows a state transition diagram for one embodiment of the OFDM packet 
processing part of a receive finite state machine that implements early false SOP trigger 
detection. 

[0013] FIG. 5 shows a flow chart of an embodiment of a method of checking whether or not 
a SOP indication is a false SOP indication, and follows the state transition diagram of FIG. 4. 

[0014] FIG. 6 shows the order of data transmitted to a MAC processor in the case that data 
received is OFDM data and that PPDU (for PLCP Protocol Data Unit) mode is enabled, 
according to one aspect of the invention. 

[0015] FIG. 7 shows a flow chart of an embodiment of method for checking whether or not 
an SOP is a false SOP trigger carried out by a MAC processor. 

[0016] FIG. 8 shows an alternate embodiment of a modem for the wireless network node of 
FIG. 1 that includes a processing system and a memory. 
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DETAILED DESCRIPTION 

[0017] Described herein are a method and apparatus that can detect relatively early whether 
or not there is a false SOP trigger in a receiving node of a WLAN. Communication in the 
WLAN is in the form of packets, and each packet has a header. According to which WLAN 
standard the node conforms, e.g., one of the IEEE 802. 11 OFDM standards, some bits in the 
header of the packet are "unused." Typically, these unused bits have known values, e.g., 0, 
for packets that exactly conform to the standard. Furthermore, some bits in the header have 
only certain combinations that are legal. We refer to header bits that have their preset values 
if they are unused bits or header bits that do not have illegal or an unexpected combination as 
header bits that have "correct" values. One implementation of the invention includes the 
transmitter building packets that are exactly conforming. At the receiving node, once an SOP 
trigger is received, one embodiment of the method examines these bits of the header of a 
packet after receiving a start-of-packet trigger in the receiving node to ascertain whether or 
not the bits meet the requirements for the particular standard, and hence whether the packet is 
valid, or the result of a SOP false trigger. In yet another aspect of the invention, some of the 
bits in the header, in particular some of the unused bits in the SERVICE field of a header that 
conforms to one of the IEEE 802.1 1 OFDM standards that according to the standard are used 
by a non-conforming transmitter — a transmitter that "substantially" but not exactly conforms 
to the standard — to add error detecting, e.g., CRC bits to better detect errors in the SIGNAL 
field. At the receiving node, there is a reduced likelihood of a false trigger being seen as a 
valid packet, e.g., an incorrect SIGNAL field having a correct set of CRC bits. 

[0018] The invention will be described in terms of a WLAN station that operated according 
to OFDM variants of the IEEE 802. 1 1 standard and proposed amendments. One receiver 
embodiment supports the IEEE 802. 1 la and g variants operating in the 2.4 GHz and 5 GHz 
frequency ranges, respectively. The invention is also applicable to a radio that operates under 
any other wireless standard for which early detection of a false SOP trigger is important, 
including other variants of the IEEE 802. 1 1 standard. 

[0019] FIG. 1 is a functional block diagram of a wireless network node 100 that includes an 
embodiment of present invention. The node 100 might be, for example, implemented on a 
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PCMCIA wireless LAN card, and includes a physical layer interface (PHY processor) 101 
that includes an antenna subsystem 102 with at least one antenna for the frequency or 
frequencies of service (approx. 2A GHz and/or approx. 5 GHz), and an antenna subsystem 
103 that for the case half-duplex operation includes a transmit/receive (T/R) switch, and for 
the case of diversity, includes a diversity switch to select an antenna. The antenna subsystem 
is coupled to a radio transceiver 109 that in one embodiment is implemented as a single chip. 
The receive chain of the transceiver includes a low-noise amplifier (LNA) 106 and receiver 
radio frequency (RF) electronics 106. The transmit part of the transceiver 109 includes 
transmit RF electronics 107 and a power amplifier (PA) 108. The transceiver provides an 
analog received signal to and accepts an analog signal for transmission from a modem 1 1 1 
that includes a receiver part 1 13, a transmitter part 1 15, and a control part 1 17 that, for 
example, implements start of packet (SOP) detection, automatic gain control, and aspects of 
the invention, including early false SOP detection. The modem is coupled to the radio 
transceiver via an RF analog interface for the received signal and signal for transmission, and 
via an RF digital interface for such control signals as gain control and status. 

[0020] The system 100 further includes a medium access controller (MAC) processor 1 19 for 
layer-2 processing. The MAC processor accepts payload data from the modem, and provides 
payload data to the modem 111 via a data interface. The MAC processor further is connected 
to the modem 111 via a digital interface that provides access to the MAC processor of various 
status and data registers in the modem 111. 

[0021] In one embodiment, the MAC processor is coupled to a host processor 121 via a host 
bus subsystem 123. While FIG. 1 shows a separate host processor, the host processor 
function may in other embodiments be incorporated with the MAC processor 1 19. In one 
embodiment, a memory, e.g., a random access memory element (RAM) 125 is included for 
program storage. The memory 125 may be directly coupled to the host or to the MAC 
processor or to both. There may also be additional memory, e.g., for buffering, and for 
simplicity, such additional memory will be assumed to be included in memory 125. One or 
more interfaces may be included, e.g., one or more interfaces that conform to well-known 
industry standards PCMCIA, PCI, USB, and so forth. 
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[0022] Some embodiments may use antenna diversity, e.g., two or more transmit antennas or 
two or more receive antennas or multiple antennas for both receiving and transmitting. The 
diversity may be provided by spatial diversity, or by having different polarizations at the 
antennas, and so forth. The antennas may be switched or combined. Such processing is 
known to improve performance in environments that include fading, and may even be used to 
provide spatial division multiple access (SDMA). 

[0023] One embodiment of system 100 is compatible with one or more variants of the lEEE- 
802.1 1 standards for wireless local area network (LAN) applications. The RF transceiver 109 
and modem 1 1 1 constitute a complete wireless engine for OSI Layer- 1 physical layer (PHY) 
functionality for one or more of the IEEE-802. 1 1 PHY variants, and the (MAC) 119 is 
substantially IEEE-802. 1 1 -compatible. One aspect of the invention modifies some aspects of 
the IEEE-802. 11 to provide better early false SOP detection. 

[0024] One embodiment of the invention is applicable to communicating using OFDM 
packets that conform to the OFDM variants of the IEEE 802.1 1 standard. Such an OFDM 
packet starts with a preamble. The preamble provides for start of packet (SOP) detection, 
automatic gain control (AGC), diversity selection when diversity is used, various other 
synchronization functions, and channel estimation. The preamble is followed by the 
modulated payload. 

[0025] The modulated payload in turn starts with the Physical Layer Control Protocol 
(PCLP) header. FIG. 2A shows a PCLP header 200 that conforms exactly to the OFDM 
variants of the IEEE 802.1 1 standard. The PCLP header starts with a 3-byte SIGNAL field 
203 that is modulated at a low data rate, in particular, SIGNAL is modulated at BPSK at rate 
1/2 and provides information about the packet, including the data rate at which the rest of the 
packet in encoded. One embodiment uses unused bits in the SIGNAL field to check for 
receive packet integrity. Another embodiment further checks the SIGNAL field to ensure that 
the combinations of bits are not illegal or unexpected. The SIGNAL field 203 is followed by 
a 2-byte SERVICE field 205 that is modulated at the payload data rate specified in SIGNAL. 
One embodiment uses unused bits in the SERVICE FIELD to check for receive packet 
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integrity. The remainder of the packet— the PLCP Service Data Unit (PSDU)— includes 
DATA at the payload data rate specified in the SIGNAL field 203. 

[0026] FIG. 2B shows the individual bits of the 5-byte PCLP header. The SIGNAL field 203 
includes RATE field of 4 bits denoted Rate[0] through Rate [3] that provide information on 
the data rate. The RATE information determines the coding rate and the modulation method 
used. The RATE field is followed by a reserved bit 213 that is always 0, and a 12-bit 
LENGTH field whose bits are denoted Length [O] through Length [ii] . The LENGTH field 
is followed by a parity bit 215. This is followed by 6-tail bits 217 of the SIGNAL field 
denoted Tail [O] through Tail [5] that are unused bits that should be 0. Note that the 
SIGNAL field includes legal combinations. Consider the RATE field. There are 4 bits, i.e., 
16 combinations, but only 8 are expected for a fully conforming packet. The LENGTH field 
similarly has illegal combinations, e.g., values above 1600. 

[0027] The three-byte SIGNAL field 203 is followed by the two-byte SERVICE field 205 
that includes 7 random scrambler initialization bits denoted Scram_init [O] through 

Scrain_Init [6] , and nine SERVICE field bits denotes service [7] through Service [15] . 

The latter are unused bits that should all be zero to conform exactly to the OFDM IEEE 
802.11 standards. 

[0028] A prior art receiver conforming to the OFDM variants of the IEEE 802. 1 1 standard 
examines the parity bit 215 to determine whether to verify received packet integrity. One bit 
does not offer high likelihood that a correct SIGNAL field was received. In such a prior art 
receiver, the receiver may continue receiving data and passing such data to the MAC 
processor until the MAC processor determines that an error has occurred, e.g., because the 
frame check sequence (FCS) field at the end of a MAC frame— a 32-bit CRC— is incorrect. 

[0029] A receiver implementing one or more aspects of the invention includes a controller 
that checks the integrity of a received packet by checking not only whether the parity bit of 
the SIGNAL bit is correct, but also whether one or more other specific bits of the SIGNAL 
field in PLCP Header 200 in any received packet have their correct value, e.g., zero for 
unused bits, and expected combinations for other bits. Thus, for such embodiments, a 
transmitter is assumed to transmit packets wherein Tail [O] through Tail [5] are 0 to 
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conform exactly to the OFDM IEEE 802, 1 1 standards. In another embodiment, the controller 
further checks the SERVICE field to determine whether or not other specific unused bits of 
the SERVICE field 205 in PLCP Header 200 in any received packet have their required 
value. Thus, for such embodiments, a transmitter is assumed to transmit packets wherein 
Service [7] through Service [15] are zero to Conform exactly to the OFDM lEEB 802. 1 1 
standards. Yet another embodiment includes non-exactly conforming, but substantially 
conforming packets wherein parts of the PLCP header are protected by a set of error 
detecting bits, e.g., CRC bits, that are placed in some of the unused SERVICE field bits. For 
one such embodiment, a transmitter is assumed to transmit packets that include an indication 
that a CRC is used, and wherein service [8] through service [15] include the CRC of some 
or all of the SIGNAL field. The indication used in one embodiment is that service [8] 
through Service [15] being all 0 indicates that CRC is not being used. 

[0030] FIG. 3 shows the modem 111 of FIG. 1 in more detail. The modem 1 1 1 is 
implemented as a single chip and includes a controller that implements the false SOP 
checking described herein. The modem accepts analog baseband signals. "Baseband" in this 
context includes low intermediate frequency signals that may need further downconversion. 
In one embodiment, the baseband signal is a single sideband signal from 10 to 30 MHz. An 
ADC 301 accepts the analog signal from a transceiver such as radio transceiver 109. The 
receive signal processor 303 accepts the digitized receive signals from the ADC 301 and 
carries out the operations needed to demodulate signals that conform to the OFDM 802. 11a 
or 802.1 Ig variants of the IEEE 802. 11 standard, or to the DSSS/CCK 802.1 lb variant of the 
IEEE 802.1 1 standard. Thus, the receive signal processor 303 includes an IEEE 802.11a 
compliant receive signal processor 341 and an 802.1 lb-compliant receive signal processor 
342. The combination of receive signal processors 341 and 342 provide an IEEE 802.1 Ig 
compliant receive processor. The processed data output 307 from the receive signal processor 
303 is coupled to an off-chip MAC processor such as MAC processor 1 19, generating and 
passing the received data of a packet to the MAC processor 1 19. In one embodiment, 
additional information also is passed on to the MAC layer processor, including information 
about the packet. In one embodiment, such information includes a measure of the received 
signal quality, e.g., in the form the error vector magnitude (EVM) of the SIGNAL field 203 
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of the PLCP header of a received packet. Status information also is provided to the MAC 
processor via registers 327 in the modem 1 1 1 header of the packet, and in one embodiment, 
the PLCP header data is provided to the MAC processor via the set 327 of status registers 
rather than via the data interface 307. 

[0031] EVM is a modulation quality metric widely used in digital RF communications 
systems. It is typically defined for link, and effectively for a transmitter or a receiver. The 
EVM is the root-mean-square (RMS) value of the error vector over time for the signal at the 
correct symbol time. In the case of a receiver, the correct symbol times are approximated by 
the decision points — the times when demodulation decisions are made. The error vector is the 
vector length of the difference, in the complex plane (I,Q space) between an ideal 
constellation point of a symbol, and the actual constellation point of a symbol at the symbol 
time for the signal. Some of us have invented a receiver that determines a good 
approximation to the EVM as an indication of the quality of the received signal. See U.S. 
Patent Application Serial No. 10/367,010, filed February 14, 2003, titled SELECTING THE 
DATA RATE OF A WIRELESS NETWORK LINK ACCORDING TO A MEASURE OF 
ERROR VECTOR MAGNITUDE, to inventors Ryan et al., Attorney/Agent Ref. No. 
CISCO-6489, for details of a receiver that includes such an EVM calculator. U.S. Patent 
Application Serial No. 10/367,010 is incorporated herein be reference. 

[0032] The receive signal processor 303 includes such EVM calculators 343 and 344 in each 
of the 802. 1 la,g and 802.1 lb receive signal processors 341 and 342, respectively. For the 
OFDM receive signal processor 341, the EVM calculator 343 is coupled to and accepts I,Q 
samples at the decision points and determines a measure of the EVM of the OFDM symbols 
in the packet. In one embodiment, EVM of the SIGNAL field of the PLCP header is 
determined. The EVM determination depends on the ideal constellation points for the 
particular modulation type, so in general depends on the data rate determined from the 
SIGNAL field. The data rate and modulation of the SIGNAL field are known. 

[0033] An analog input from the transceiver 109 is sampled at 80Ms/s by the ADC 301 and 
an internal IQ down-converter in processor 303 generates baseband I and Q channel outputs. 
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[0034] A to-be-transmitted signal 309 from the MAC processor 1 19 is input to a transmit 
signal processor 305 that performs modulation and other signal processing to provide digital I 
and Q signals that are converted to analog I- and Q-signals by a pair of digital-to-analog 
converters. These analog signals are input to the transmitter input of the transceiver 109. The 
transmit signal processor 305 includes an IEEE 802.1 la,g compliant transmit signal 
processor 345 and an 802.1 lb-compliant transmit signal processor 346. 

[0035] One aspect of the invention is the inclusion in the PLCP header of a packet for 

transmission information that helps protect the integrity of the header and that provides for a 
matching receiver to quickly determine whether or not a SOP trigger is a false SOP trigger. 

[0036] In one embodiment, operation of the modem 1 1 1 is controlled and monitored by a set 
of control and status registers 327 that, in one embodiment, are 16-bits each and accessed via 
Serial Peripheral Interface (modem SPI), or in another embodiment, a parallel bus. 

[0037] The receiver part of the modem is controlled by radio control block 320 that includes 
a start-of-packet (SOP) detector 322, an automatic gain control (AGC) controller 323 for 
dynamically setting the gains and the performance of the transceiver, and a Receive controller 
321 coupled to the SOP detector 322 and the receive signal processor 303, and that in one 
embodiment implements false SOP detection operating according to one or more aspects of 
the invention. 

[0038] The receive and transmit functions of the modem are controlled by a TX/RX control 
block 324 that both provides controlling the function of the modem under control of the off- 
chip MAC controller and that provides status signals to the off-chip MAC controller 1 19. 

[0039] The modem 300 also includes a reference distribution subsection 325 to provide 
various reference currents and voltages to the transceiver, a test subsection 329, and a 
reset/clock generation subsystem. 

[0040] The modem 1 1 1 also includes an RSSI interface accepting a pair of analog to digital 
converters 311 and 313 to convert analog RSSI values from different parts of the receive 
chain of transceiver 109 to digital signals for the radio control section 320 that implements 
AGC and SOP. 
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[0041] The modem 1 1 1 also includes a modem gain control interface in radio control 320 
that outputs gain parameters, e.g., in the form of sets of gain control bits to a matching gain 
control interface in a radio receiver such as that of transceiver 109. In one embodiment, the 
modem gain control interface also provides a mechanism for controlling the transmit power 
level of a radio transmitter connected to the modem by selecting from one of a set of 
configurations for the power amplifier of the transmitter. 

[0042] One aspect of the invention is enabling rapid false start-of-packet detection by the 
transmit processor setting particular bits of the PLCP header that are unused to 0 and the 
receive processor ascertaining whether indeed such unused bits are zero. Another aspect of 
the invention is checking that only correct combinations exist for at least some of the bits of a 
received header. 

[0043] Another aspect of the invention is further protecting the integrity of the header, e.g., 
the SIGNAL field by including in a to-be-transmitted packet an error detection code such as a 
cyclic redundancy code to provide more than the single parity bit to protect the SIGNAL 
field. Another aspect of the invention is determining whether such encoding is included in a 
packet, and if yet, ascertaining whether or not an error occurred in the SIGNAL field by 
checking the error detecting code. When such coding is included, the packet no longer strictly 
conforms to the IEEE 802. 11 standard, but rather "substantially conforms" to the standard. 

[0044] In one embodiment, the transmit processor such as the OFDM transmit processor 345 
includes a processor to calculate an 8-bit CRC of data from the SIGNAL field and place the 
resulting CRC in the unused part of the SERVICE field, in particular, into the eight 
SERVICE field bits of the fifth PLCP header byte (service [15 : 8] ) that should all be zero to 
conform to the OFDM IEEE 802.1 1 standards. One version calculates the CRC of the 17 bits 
that make up the LENGTH, RATE, and reserved bit part of the SIGNAL field. The CRC 
calculation uses the generator polynomial x^+x^+x^+l. Such a CRC detects all single-bit and 
double-bit errors, and all errors resulting in odd parity, and also detects all burst errors less 
than or equal to 8-bits in length. 

[0045] The control/status registers 327 of modem 1 1 1 (FIG. 3) include a settable parameter 
that indicates whether or not the OFDM transmit processor 345 is to include calculating the 
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CRC and placing it into the PLCP header. If it is indicated that the transmitter is to send 
"exactly standard" packets, then the unused SERVICE bits are set to 0. 

[0046] Operation of the receive chain is now described in more detail. 

[0047] Initially, the AGC controller 323 sets a default gain and waits for a packet to arrive, as 
signaled by a start-of-packet (SOP) event detected by the start-of-packet detector 322 in radio 
controller 321. The default gain setting sets the gains of each section to allow packets having 
a broad range of signal strengths to be detected reliably. Initially, the start-of-packet (SOP) 
detector 322 waits for a start event such as a rise in one or more of the RSSI values to 
indicate a possible start of packet. One embodiment uses a method similar to that disclosed in 
U.S. Patent Application Serial No. 10/095,668 to Ryan et al, filed March 8, 2002, and titled 
AUTOMATIC GAIN CONTROL AND LOW-POWER START-OF-PACKET DETECTION 
FOR A WIRELESS LAN RECEIVER, incorporated herein by reference. Depending on the 
SOP detection method, the SOP event nominally occurs during the first 1.6 |xs of an OFDM 
packet. 

[0048] Once the initial SOP event occurs, the AGC controller 323 sets the gains of the 

receive chain in the transceiver according to the RSSI values to bring the analog outputs to be 
within the range of the ADCs. A further AGC stage uses digitized signal values to further set 
the gain of the receiver. Once the ADCs are operating, the SOP detector further refines the 
SOP event timing using correlators that correlate the digital signal values with expected short 
symbols and with expected long symbols that would be present in the preamble of a packet 
that conforms to the OFDM variants of the IEEE 802. 11 standard. 

[0049] The modem 300 now continues to process the data part of the packet, starting the with 
PLCP header 200 in the case of an OFDM packet. 

[0050] Operation of an embodiment of the AGC controller uses a finite state machine (FSM) 
and is described in more detail in U.S. Patent Application Serial No. 10/xxx,xxx filed July 17, 
2003 to inventors Adams, et al., titled ADAPTIVE AGC IN A WIRELESS NETWORK 
RECEIVER, Attorney/ Agent Ref. No. CISCO-7343. Such U.S. Patent Application Serial No. 
10/xxx,xxx is incorporated herein by reference. 
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[0051] After the SOP event, indicated by a logic bit we call sop_boundary being 1, the 
integrity of the SOP trigger is ascertained by the receive controller that in one embodiment is 
implemented by finite state machine we call the receive FSM. An alternate embodiment uses 
a processing system. 

[0052] FIG. 4 shows a state transition diagram 400 for one embodiment of the OFDM packet 
processing part of the receive FSM. FIG. 5 shows the flow chart of an embodiment of a 
method of checking whether or not a SOP indication is a false SOP indication, and follows 
the state transition diagram 400. 

[0053] The receive controller waits (step 503) for an SOP boundary indication in a wait state 
called the rx_idle state in which the AGC controller 323 is armed after the gain is set to the 
default gain and also waiting for a start of packet event (SOP) from the SOP detector 322. 
The RX_iDLE state is vacated when there is a SOP time determined, as indicated by a binary 
variable called sop_boundary. 

[0054] In FIG. 4, variables that start with c„ indicate configuration registers of set 327. 
Thus, c_std_rx_odf m indicates that the modem is configured to receive ODFM packets 
conforming to the IEEE 802. 1 1 a and 802. 1 1 g standards, and c_std_rx_dsss indicates that 
the modem is configured to receive packets conforming to the IEEE 802.1 lb standard. Thus, 
FIG. 4 shows several transitions to states for processing IEEE 802. lib conforming packets 
indicated as 1 lb state A, 1 lb state B, 1 lb State D. For example, from the rx_idle state, 
sop_boundary being true, i.e., equal to 1 and c_std_rx_dsss true causes a transition to a 
IEEE 802.1 lb processing state for starting to process the packet. Such IEEE 802.1 lb-related 
states are not discussed here. How to modify the inventive aspects of the invention for 
processing non-ODFM packets is left to the reader and would be clear to those in the art. 

[0055] For the OFDM case of interest, sop_boundary true (and c_std_rx_of dxa true) 
causes a transition to a state called rx_iia_chkpre in which step 505 of checking the 
SIGNAL field of the PLCP header is carried out. In one embodiment, in addition to the parity 
bit 215 being checked for correctness, one or more of the reserved bit 213 and any or all of 
the tail bits 217 are checked to ensure that they are 0. In one embodiment, the RATE and 
SIGNAL bits are further checked for illegal combinations. In the embodiment that includes 
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uses a modem that provides a measure of the received signal quality, the received signal 
quality of the SIGNAL field part of the signal is also checked to ensure that it is above a 
preset threshold. In one embodiment, the modem 1 1 1 includes an EVM calculator 343 to 
provide the EVM, and the EVM of the SIGNAL field is also checked to ensure that it is 
above a preset threshold. 

[0056] If any of these indicate that there has been an error (test step 507), indicated by setting 
true a binary variable denoted phyiia_preainble_bad and if the rate is a supported rate, 
indicated by the receive controller 321 setting a variable called 

phy_iia_rx jreainbie_unsupported_rate as false, the State of the receive controller 321 
moves to a state called the rx_reset_agc state in which step 509 is carried out, namely 
treating the packet as noise, including resetting the AGC controller. As a result of step 509, 
the MAC processor, for example, will backoff using a distributed coordination function 
interframe space (DIPS). The receive controller 321 also moves from the rx_iia_chkpre to 
the RX_RESET_AGC State if there is some indication that the preamble was bad. In one 
embodiment, this occurs if there is signal loss during the preamble, or of either of the 
correlator for the short symbol or the correlator for the long symbol lose their expected 
output. When any of these conditions occur, the SOP detector sets a binary variable 
phyiia_rx_preaxiibie_iooks_crook to true, and this in turn causes the receive controller 
321 to move to the rx_reset_agc state. 

[0057] Note that under some conditions, step 507 may conclude that this is a packet that 
conforms to the IEEE 802.1 lb standard, in which case the state moves to one of the 802.1 lb 
states. 

[0058] If, on the other hand, steps 505 and 507 indicate that the SIGNAL field passed its tests 
(phy_iia_rx_preaxnbie_good is true), or the rate is unsupported as indicated by 
phy_iia_rx_preainbie_\insupported_rate being true, the receive controller 321 moves to 
a state called rx_iia_chkser in which a step 51 1 of checking the SERVICE field is carried 
out. Note that the SERVICE field is modulated at a rate indicated by the SIGNAL field. 

[0059] One aspect of the invention is further protecting the integrity of the header, e.g., the 
SIGNAL field by including in a to-be-transmitted packet an error detection code such as a 



CISCO-7472 



15 

CRC to provide more than the single parity bit to protect the SIGNAL field. The receive 
processor further can determine whether or not such error detecting encoding is used. 
Another aspect of the invention is determining whether such encoding is included in a packet, 
and if yes, ascertaining whether or not an error occurred in the SIGNAL field by checking the 
error detecting code. 

[0060] Thus, referring again to FIGS. 4 and 5, in state rx_iia_chkser (FIG. 4), step 5 1 1 
includes checking the SERVICE field for integrity. The method first ascertains whether or 
not a CRC is used to protect the SIGNAL field. If yes, it is ascertained whether or not the 
CRC in Service [15 : 8] is correct to indicate if the packet's SERVICE field passes the test of 
the RX_iiA_CHKSER State. IF CRC is not being used, it is ascertained whether or not the 
service bits Service [15 s 7] are all 0 as required to strictly conform to the IEEE 802. 1 1 
OFDM standard to indicate if the packet's SERVICE field passes the test of the 

RX_11A_CHKSER State. 

[0061] If the packet's SERVICE field passes the test (step 513), indicated by setting a 

variable called phylla_service_good true or if phylla_rx_preainble_unspported_rate 

is true, then the state of the receive controller 321 moves to state rx_iia_onair until a time 
is expired and then on to state rx_iia_proc where the rest of the packet is processed. 
Processing continues until the end of packet at which time the state moves back to the 
Rx^iDLE state. The processing includes passing data to the MAC processor for further 
processing according to the appropriate MAC protocol. 

[0062] If on the other hand the packet's SERVICE field fails the test (step 5 1 3), the receive 
controller 321 sets a variable called phyiia_service_bad as true and moves the state to the 
RX_RESET_AGC State in which step 509 is carried out, namely treating the packet as noise, 
including resetting the AGC controller. 

[0063] In a first alternate embodiment, rather than an error detecting code such as a CRC 
being used to protect the SIGNAL field, an error correcting code is used that can correct for 
one or more bit errors in the SIGNAL field. If 8-bits are used for as additional check bits for 
encoding 17 bits of the SIGNAL field, i.e. a total of 25 bits are used to transmit 17 bits of 
information, or, not including the reserved bit, 8-bits are used for the check bits encoding 16 
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bits of the SIGNAL field, i.e. a total of 24 bits are used to transmit 16-bits, error correction of 
at least one bit error is possible. There are many texbooks that describe implementing error 
correcting codes. See for example, The Art of Error Correcting Coding by Robert H. 
Morelos-Zaragoza, John Wiley & Sons, 2002 ISBN: 0471495816. See also the Web sites 
http://www.eccpage.com/ and http://the-art-of-ecc.com/ for a discussion of various practical 
error correcting codes, including computer programs to carry out error correcting codes. 
Including error correcting allows for detecting of highly degraded signals. This would allow a 
station using such to stay in time synchronization with the network as such a station can then 
reliably discriminate between a false packet, and a highly distorted (and not necessarily 
decodable) real packet with a calculable time on the medium. 

[0064] Note that failing the SERVICE field test in the case that no error correcting or 
detecting is used does not indicate that there was necessarily an error in the SIGNAL field, 
but does indicate that there likely was an error in the payload part that is modulated by a 
method and at a rate indicated by RATE. 

[0065] The processing of step 5 14 in the tx_iia_proc state includes forming the data for the 
MAC processor 119. One embodiment of the modem 1 1 1 operates in two modes we call 
PSDU (for PLCP Service Data Unit) mode and PPDU (for PLCP Protocol Data Unit) mode, 
respectively. In PSDU mode, only packet payload data is transferred to the MAC processor 
1 19. All receive packet header information is available to the MAC processor 1 19 in the 
status registers 327. In PPDU mode, the PPDU data, such as the PLCP header data, is also 
sent to the MAC processor 1 19, and such data is sent to the MAC processor once it is 
decoded. 

[0066] FIG. 6 shows the order of data transmitted to the MAC processor 1 19 in the case that 
the data is OFDM data and that PPDU mode is enabled. In one embodiment, a total of nine 
bytes are sent before the PSDU data. The byte 605 provides the received power at the 
receiver for the packet, in particular, the received signal strength indication — the RSSI — at 
the receiver of transceiver 109 for the packet. The second provides a measure of the signal 
quality for the SIGNAL field. In one embodiment, this is the EVM calculated by EVM 
calculator 343. The next byte contains an indication of the antenna used, the standard 
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(802.1 la,g OFDM or 802.1 lb DSSS/CCK), and other information related to the DSSS/CCK 
case. One embodiment also provides for sending some additional information after the 
PSDU data, e.g., for debugging. The next (fourth) byte indicates to the MAC the number of 
post PSDU bytes that are to be included. This is followed by the five-byte PLC? header itself 
(for the OFDM case). The PSDU data follows. 

[0067] When the PPDU mode is used, the first seven bytes are first provided to the MAC 
processor. This includes the SIGNAL field. After the modem determines the rate, etc., the 
last two bytes (SERVICE) are provided to the MAC followed by the PSDU data. 

[0068] In one alternate embodiment, part of the determination of whether or not the trigger is 
a false trigger is carried out partly in the modem 111, and partly in the MAC processor 1 19. 
One particular embodiment, step 505 (the rx_iia_chkpre state) does not include checking 
the EVM. Rather, using PPDU mode as an example, the first 7-bytes passed to the MAC 
processor include the EVM of the SIGNAL field. The MAC processor ascertains whether or 
not the received signal quality as indicated by the EVM is too low. If EVM is below a 
settable threshold, the MAC processor assumes a false trigger. 

[0069] In another alternate embodiment, all the processing to determine whether or not an 
SOP is a false SOP trigger is carried out by the MAC processor rather than the receive signal 
processor. FIG. 7 shows a flow chart of such an embodiment. In 703, the MAC waits for 
indication that SIGNAL field data is available, e.g., that in PPDU mode, the modem is ready 
for the MAC to accept the seven initial bytes, or in PSDU mode, that the registers in register 
set 327 contain the SIGNAL part of the PLCP header. Once an indication is made to the 
MAC processor, in step 705, for PSDU mode, the MAC processor checks the SIGNAL field 
data in the respective registers of the register set 327 of the modem for integrity, and in 
PPDU mode, the MAC processor checks the SIGNAL field for integrity by checking for 
unused bits having their preset values, and in one embodiment, also ensuring that RATE 
and/or SIGNAL do not have illegal combinations. If SIGNAL fails the test (707), the MAC 
processor treats the data as noise (709). If SIGNAL passes the test, and once the SERVICE 
field data is available to the MAC processor, in step 71 1 , the MAC processor checks the 
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SERVICE field for integrity, as described above. If the SERVICE field passes the test (713), 
the MAC processor continues to receive and process the PSDU data. 

[0070] Note that yet another alternate embodiment in which the ascertaining whether or not 
an SOP trigger is a false trigger is carried out in the MAC processor, the MAC processor 
accepts the first three bytes of the PLC? header from the PHY processor as soon as such data 
is available. The MAC processor then examines certain bits of the SIGNAL field to check 
whether or not the trigger is a false trigger. If not, the processing continues, and the modem 
passes the next two bytes of the PLC? header to the MAC processor. The MAC processor 
now proceeds to further ascertain if the SOP trigger is likely to be a false SOP trigger by, in 
one embodiment in which CRC or a similar error detecting code may be used, first 
ascertaining if CRC is used to protect the SIGNAL field of the particular received packet, and 
if so, checking the CRC, and if not, checking certain bits of the SERVICE field to make sure 
they are set to 0. In another version in which no provision is made for error correction, the 
unused SERVICE field bits need all be 0 to indicate that the SOP trigger is not a false trigger. 

[0071] While one embodiment uses the EVM of the SIGNAL field as a measure of the signal 
quality with which to ascertain whether or not an SOP is a false SOP trigger, alternate 
embodiments use a different measure for the signal quality, such as alternate measures of 
signal-to-noise. One alternate embodiment used with a receiver in transceiver 109 that 
includes a filter in the receive signal path 106 and that provides both a pre-filter measure of 
signal strength and a post-filter measure of signal strength to the modem 111, uses a measure 
of signal to adjacent-channel-interference ratio. Comparing such pre- and post-filter measures 
of signal strength provides a measure of the amount of filtering by the filter, and this in turn 
provides a measure of adjacent channel interference. See above-mentioned incorporated-by- 
reference U.S. Patent Application Serial No. 10/xxx,xxx filed July 17, 2003 to inventors 
Adams, et al., titled ADAPTIVE AGC IN A WIRELESS NETWORK RECEIVER for details 
on how such measures are calibrated and for how providing such pre- and post-filter 
measures of signal strength provides improved AGC. 

[0072] Note that while one embodiment is described in which additional information such as 
RSSI and EVM is provided to the MAC processor in one particular format, the invention is 
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not at all restricted to such formats. In another version in which no provision is made for error 
correction, some of the unused SERVICE field bits may be used to send to the MAC 
processor an indication of the received signal strength or a measure of signal quality such as 
EVM. 

[0073] While an embodiment has been described for operation with a WLAN receiver with 
RF frequencies in the 5 GHz range and 2.4 GHz range (the 802. 11 a and 802. 11 g variants of 
the IEEE 802. 1 1 standard), the invention may be embodied in receivers and transceivers 
operating in other RF frequency ranges, and in a method or apparatus for early false SOP 
trigger detection. Furthermore, while a receiver embodiment for operation conforming to the 
IEEE 802.1 1 OFDM standards has been described, the invention may be embodied in 
receivers conforming to other standards and for other applications, including, for example 
other WLAN standards and other wireless standards where it is required to detect false SOP 
triggers early. Applications that can be accommodated include IEEE 802.1 1 wireless LANs 
and links, wireless Ethernet, HIPERLAN 2, European Technical Standards Institute (ETSI) 
broadband radio access network (BRAN), and multimedia mobile access communication 
(MMAC) systems, wireless local area networks, local multipoint distribution service (LMDS) 
IF strips, wireless digital video, wireless USB links, wireless IEEE 1394 links, TDMA packet 
radios, low-cost point-to-point links, voice-over-IP portable "cell phones" (wireless Internet 
telephones), etc. 

[0074] Note that the invention is usable in a node of a wireless network. The node may 

implement an access point, a client station, a bridge, or any other network entity that includes 
wirelessly receiving packets that exactly or substantially conform to a standard supported by 
the network. 

[0075] While FIG. 1 shows an embodiment of a wireless node in which the transceiver is one 
chip, the modem is another, and the MAC processor is yet another chip, the invention is not 
limited to any such configuration. The combination of a transceiver and modem may be 
implemented in a single chip, the modem and the MAC processor may be implemented as 
one chip, the transceiver, modem, and MAC processor may be implemented as one chip, 
some of the elements may be discrete, and so forth. 
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[0076] While one embodiment of checking the integrity of the SOP trigger uses the receive 
controller that in one embodiment is implemented by finite state machine, in another 
embodiment, checking the integrity of the SOP trigger uses a controller that includes a 
processing system and a memory, with an embodiment of the method (FIG. 5) implemented 
by instructions executed by one or more processors of the processing system. FIG. 8 shows 
an alternate modem embodiment 800 in which the radio control module 820 includes a 
processor 802 coupled to a memory 805 that contains the instructions to implement the 
method described herein and carrier out by the receive controller 821. The processor in such 
an embodiment may also be used to execute instruction in the memory to implement other 
features of the modem 800, such as the action of the AGC controller 823. 

[0077] Note that while one embodiment checks all of service [8] through service [15] to 
see if they are 0 as a test for integrity and/or a test to ascertain whether error detecting is used, 
in an alternate embodiment, a designer may choose to select fewer of these bits to check for 
integrity. 

[0078] Note that while one embodiment includes a check to see if the rate is unsupported, 
and continues processing in such a case (if it can), other embodiments do not include this 
check. 

[0079] Thus, embodiments of the methods described herein may be in the form of computer 
programs, e.g., code segments that each executes on a processing system, e.g., one or more 
processors that are part of a modem. Thus, as will be appreciated by those skilled in the art, 
embodiments of the present invention may be embodied as a method, an apparatus such as a 
special purpose apparatus, an apparatus such as a data processing system, or a carrier 
medium, e.g., a computer program product. The carrier medium carries one or more computer 
readable code segments for controlling a processing system to implement a method. 
Accordingly, aspects of the present invention may take the form of a method, an entirely 
hardware embodiment, an entirely software embodiment or an embodiment combining 
software and hardware aspects. Furthermore, the present invention may take the form of 
carrier medium (e.g., a computer program product on a computer-readable storage medium) 
carrying computer-readable program code segments embodied in the medium. Any suitable 
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computer-readable medium may be used including a magnetic storage device such as a 
diskette or a hard disk, or an optical storage device such as a CD-ROM. 

[0080] It will be understood that the steps of methods discussed are performed in one 
embodiment by an appropriate processor (or processors) of a processing (i.e., computer) 
system executing instructions (code segments) stored in storage. It will also be understood 
that the invention is not limited to any particular implementation or programming technique 
and that the invention may be implemented using any appropriate techniques for 
implementing the functionality described herein. The invention is not limited to any 
particular programming language or operating system. 

[0081] Reference throughout this specification to "one embodiment'* or "an embodiment" 
means that a particular feature, structure or characteristic described in connection with the 
embodiment is included in at least one embodiment of the present invention. Thus, 
appearances of the phrases "in one embodiment" or "in an embodiment" in various places 
throughout this specification are not necessarily all referring to the same embodiment. 
Furthermore, the particular features, structures or characteristics may be combined in any 
suitable manner, as would be apparent to one of ordinary skill in the art from this disclosure, 
in one or more embodiments. 

[0082] Similarly, it should be appreciated that in the above description of exemplary 
embodiments of the invention, various features of the invention are sometimes grouped 
together in a single embodiment, figure, or description thereof for the purpose of streamlining 
the disclosure and aiding in the understanding of one or more of the various inventive 
aspects. This method of disclosure, however, is not to be interpreted as reflecting an intention 
that the claimed invention requires more features than are expressly recited in each claim. 
Rather, as the following claims reflect, inventive aspects lie in less than all features of a 
single foregoing disclosed embodiment. Thus, the claims following the Detailed Description 
are hereby expressly incorporated into this Detailed Description, with each claim standing on 
its own as a separate embodiment of this invention. 

[0083] All publications, patents, and patent applications cited herein are hereby incorporated 
by reference. 
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[0084] Thus, while there has been described what is believed to be the preferred 

embodiments of the invention, those skilled in the art will recognize that other and further 
modifications may be made thereto without departing from the spirit of the invention, and it 
is intended to claim all such changes and modifications as fall within the scope of the 
invention. For example, any formulas given above are merely representative of procedures 
that may be used. Functionality may be added or deleted from the block diagrams and 
operations may be interchanged among functional blocks. Steps may be added or deleted to 
methods described within the scope of the present invention. 
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